Plugin validation now checks a plugin's MCP server files

A plugin is an add-on package for Claude Code. Some plugins bring MCP servers, which are external tools Claude can connect to. Plugin validation now also reads the plugin's MCP server files: .mcp.json, plus any ./*.json files that plugin.json lists under mcpServers. It does not follow symlinks (shortcut files that point somewhere else), and it refuses files above a size limit.

It reports these as errors:

• headersHelper referring to ${user_config.*}
• userConfig keys the plugin never declared
• invalid URLs
• an unknown server type
• a url given with no type

It warns about these:

• http:// or ws:// addresses to any host other than the local machine
• header values that look like real credentials, matched against known token patterns or by how random the value looks on auth-style headers
• lists used where settings objects are expected
• a byte-order mark (BOM, an invisible marker at the start of a file)
• too many server files